Researching Android Device Security with the Help of a Droid Army
Explore Android device security using a diverse cluster to tackle fragmentation, enhance auditing, and improve exploit development techniques.
Secure Because Math - A Deep-Dive on Machine Learning-Based Monitoring
Explore machine learning techniques in information security, their strengths and limitations, and practical applications for incident detection and response. Learn to evaluate ML-based security solutions critically.
The New Scourge of Ransomware - A Study of CryptoLocker and Its Friends
Explore the evolution of ransomware, focusing on CryptoLocker and its impact. Learn about threat intelligence responses, infrastructure tracking, and lessons for managing emerging cyber threats.
A Journey to Protect Points-of-Sale
Explore point-of-sale vulnerabilities, memory scraping threats, and effective mitigation strategies in retail environments. Learn practical cybersecurity measures to protect sensitive transaction data.
Bitcoin Transaction Malleability Theory in Practice
Explore the mysterious "Transaction Malleability" vulnerability that nearly collapsed Bitcoin, with practical demonstrations of its exploitation and impact on major platforms.
Hacking the Wireless World with Software Defined Radio - 2.0
Explore wireless hacking using software-defined radio. Learn to analyze, reverse engineer, and exploit RF signals in various systems, from pagers to satellites, using open-source tools and affordable hardware.
From Attacks to Action - Building a Usable Threat Model to Drive Defensive Choices
Translating threat intelligence into actionable defensive strategies using community-driven approach. Explores evolution of threat modeling and its integration with risk management frameworks.
Point of Sale System Architecture and Security
Explore POS system architecture, integrated payment processing, and security vulnerabilities. Learn attack vectors and mitigation strategies to protect businesses from financial breaches.
Unveiling the Open Source Visualization Engine for Busy Hackers
Open source engine for creating advanced data visualizations, enabling visual learners to interpret complex data sets efficiently. Useful for security practitioners, incident responders, and malware researchers.
SAP, Credit Cards, and the Bird that Talks Too Much
Explore exploits in SAP applications to extract money, payment info, and credit card data from major organizations' business backbones. Follow the bird for intriguing data tweets.
The Library of Sparta
Explore military doctrine to enhance cybersecurity strategies. Learn to apply tactical, operational, and strategic concepts for effective defense against advanced adversaries in today's militarized Internet landscape.
Babar-ians at the Gate - Data Protection at Massive Scale
Explore data protection challenges and solutions for Big Data environments, focusing on security considerations for Hadoop and emerging vulnerabilities in large-scale data management systems.
48 Dirty Little Secrets Cryptographers Don't Want You to Know
Explore 48 cryptographic attacks through hands-on challenges, covering block ciphers, public key algorithms, and real-world vulnerabilities. Gain practical insights into crypto exploitation across multiple programming languages.
How Smartcard Payment Systems Fail
Explore vulnerabilities in smartcard payment systems, including protocol flaws, certification issues, and governance problems. Learn about real-world attacks and their implications for EMV adoption.
Building Safe Systems at Scale - Lessons from Six Months at Yahoo
Insights on building secure systems for large-scale internet companies, addressing challenges of surveillance, user privacy, and evolving security threats in the digital landscape.
Control-Alt-Hack - White Hat Hacking for Fun & Profit
Explore ethical hacking through a card game that simulates security audits and consulting. Learn about diverse hacking skills, mission challenges, and cybersecurity concepts in an engaging, entertaining format.
Sexy Defense - Maximizing the Home-field Advantage
Proactive defense strategies: intelligence gathering, modeling, and expanding defender roles. Maximize existing resources for effective security posture against penetration testers and red teams.
1000 Hackers in a Box - Failings of Security Scanners
Critique of commercial security scanners, exposing their shortcomings, false promises, and potential to encourage bad security practices. Challenges assumptions about their effectiveness in network protection.
Hope, Hype, Horrors - E-Commerce Explored
Explore e-commerce's growth, potential, and challenges. Analyze threats in emerging technologies and discuss the current state of online business transactions and security concerns.
The M2M Risk Assessment Guide - A Cyber Fast Track Project
Comprehensive guide for assessing and mitigating security risks in Machine-to-Machine (M2M) technologies across industries, focusing on vulnerabilities and design strategies.
Fact and Fiction - Defending Your Medical Devices
Explore medical device security, debunk myths, and learn about a real software bug. Gain insights on improving device security and proper vulnerability disclosure to the FDA.